deny.toml (1090B)
1 # Configuration used for dependency checking with cargo-deny. 2 # 3 # For further details on all configuration options see: 4 # https://embarkstudios.github.io/cargo-deny/checks/cfg.html 5 6 [graph] 7 targets = [ 8 { triple = "x86_64-unknown-linux-gnu" }, 9 { triple = "x86_64-apple-darwin" }, 10 { triple = "x86_64-pc-windows-msvc" }, 11 { triple = "aarch64-apple-darwin" }, 12 { triple = "wasm32-unknown-unknown" }, 13 ] 14 15 [advisories] 16 yanked = "deny" 17 18 ignore = [ 19 "RUSTSEC-2021-0127", # serde_cbor 20 "RUSTSEC-2023-0071", # rsa Marvin Attack: (https://jira.corp.adobe.com/browse/CAI-5104) 21 ] 22 23 [bans] 24 multiple-versions = "allow" 25 26 [licenses] 27 allow = [ 28 "Apache-2.0", 29 "BSD-2-Clause", 30 "BSD-3-Clause", 31 "CC0-1.0", 32 "ISC", 33 "LicenseRef-ring", 34 "MIT", 35 "MPL-2.0", 36 "Unicode-DFS-2016", 37 "Zlib", 38 ] 39 confidence-threshold = 0.9 40 41 [[licenses.clarify]] 42 name = "ring" 43 expression = "LicenseRef-ring" 44 license-files = [ 45 { path = "LICENSE", hash = 3171872035 } 46 ] 47 48 [sources] 49 unknown-registry = "deny" 50 unknown-git = "deny" 51 allow-registry = ["https://github.com/rust-lang/crates.io-index"] 52 allow-git = []